Pick your trap, get the playbook. This hub groups 43+ RTI Wiki guides into seven common middle-class traps: edtech refunds, insurance mis-selling, bank auto-debits, credit-report misuse, fake Telegram jobs, trading and Ponzi rackets, fake income-tax or GST calls, and high-volume cyber-investment scams. Each section names the exact regulator, the complaint portal, the timeline, and the next-step article.
This hub is built for a salaried Indian household between ages 22 and 65. You have a steady income, a UPI app, a demat account or two, a health policy, maybe a home loan, and at least one elderly parent who picks up unknown calls. That profile is the single biggest target for organised scam networks in India today. The traps below are the ones we see in reader mail every week.
If you are in the middle of losing money right now, jump to the matching section, open the linked guide, and follow the timeline. If you have already lost money, start at the cyber-fraud recovery hub and dial 1930 first.
Last reviewed: 10 July 2026 | Next review due: October 2026
This guide is maintained by the RTI Wiki editorial team and cross-checked against current RBI, SEBI, IRDAI, and Ministry of Consumer Affairs circulars. Every regulator portal, complaint timeline, and statutory reference on this page was verified on the date above. If a link has moved, report it via the contact page and we will fix it within 48 hours. This is educational content, not legal advice — for your specific situation, consult a qualified advocate.
The pattern is identical across brands: hard upsell, EMI tagged to a third-party loan, refund clause buried in a 14-page PDF, dropout penalty larger than the course fee. The Ministry of Education's 2023 guidelines on coaching centres and the Consumer Protection Act 2019 are your two main levers. The NCDRC has consistently held that “no-refund” clauses are unfair contract terms.
Tools that help: the AI RTI Drafter will pre-fill an RTI to the Ministry of Education PIO asking for grievances logged against your institute. Pair it with the PIO Reply Checker if you get a brush-off reply.
Two distinct traps hide under “insurance”: the sale-time trap, where an agent pushes a whole-life policy as a “tax-saving FD”; and the claim-time trap, where a surveyor or TPA shaves a legitimate claim. Both go to IRDAI, but the route is different. Free-look cancellation is your strongest 14-day weapon and almost no buyer uses it.
Some losses do not begin with a scam call. They begin with a silent mandate, a credit enquiry you never made, or a trading-account payout that never reaches the bank. These pages sit between banking grievance, credit-bureau correction, and securities-market complaint routes.
The “task scam” is now the single biggest entry point to a full account-emptying fraud. It starts on Telegram or WhatsApp with a small “rating” payout, escalates to a “prepaid task wallet”, and ends with you wiring lakhs to chase a frozen balance. The fake-LinkedIn-recruiter and pay-to-apply scams are quieter but bleed students dry. None of these are recoverable through the job portal, they need a 1930 ticket and a cyber-cell FIR within 24 hours.
If a “trading” group on Telegram is showing you screenshots of 30 percent monthly returns, the only question left is how much you lose, not whether. SEBI's investor charter, the Banning of Unregulated Deposit Schemes Act 2019, and the Prize Chits and Money Circulation Schemes (Banning) Act 1978 between them cover almost every variant. Use the SEBI SCORES portal for registered intermediaries and the state Economic Offences Wing for unregistered operators.
A real income-tax, GST or court communication never asks for an OTP, a UPI payment, or a “verification fee” on a call. CBDT, CBIC and every High Court issue communications with a Document Identification Number (DIN) that you can verify on the official portal. The 60-second test is simple: hang up, search the official helpline number yourself, call back, and quote the DIN. Most scams die at step one.
Crypto in India is legal to hold and trade, but tax rules are punishing and the recovery options for a hacked wallet or a rug-pull are limited. Gaming and betting apps are now the fastest-growing front for organised laundering. If you funded a gaming wallet from a salary account and lost it, that is a chargeable cyber-fraud, not a “bad bet”, file 1930 anyway.
These three tools cover 90 percent of what readers do after a scam hits.
According to data from the Reserve Bank of India's annual report on frauds (available at rbi.org.in), bank-related frauds involving amounts under ₹1 lakh — the typical middle-class loss band — have risen sharply since 2022. The National Cybercrime Reporting Portal (cybercrime.gov.in, operated by the Ministry of Home Affairs) recorded over 7.4 lakh complaints in 2024 alone, and the Indian Cyber Crime Coordination Centre (I4C) reports that the average victim lost between ₹15,000 and ₹3,00,000 per incident.
A Press Information Bureau release (pib.gov.in) from 2024 noted that cyber-criminals are increasingly targeting salaried professionals aged 25–45, specifically those with active UPI handles and demat accounts. The data breaks down as follows:
The key takeaway: no trap is “too small to report.” Even a ₹500 loss through a fake customer-care number should be reported on 1930, because the same syndicate may be running a ₹50 lakh parallel fraud. See the 1930 helpline script for exactly what to say when you call.
Not all traps are structured the same way. Some begin with a cold call, others with a WhatsApp forward or a YouTube ad. The table below compares the seven most common trap categories across entry channel, typical loss, the primary regulator, and the fastest complaint route. Use it as a triage chart when you or a family member are unsure which guide to open first.
| Trap category | Typical entry channel | Average loss range | Primary regulator | Fastest complaint route | RTI Wiki guide |
|---|
| EdTech refund fraud | Cold call, YouTube ad, school WhatsApp group | ₹15,000 – ₹2,00,000 | Consumer Protection Act 2019 / Min. of Education | Consumer forum (NCDRC) → then RTI | EdTech refund guide |
| Insurance mis-selling | Bank RM, agent house visit, “tax-saving” pitch | ₹20,000 – ₹5,00,000 | IRDAI (irdai.gov.in) | Bima Bharosa → Insurance Ombudsman | IRDAI complaint guide |
| NACH / auto-debit fraud | Silent mandate from app or NBFC | ₹500 – ₹50,000 (recurring) | RBI (rbi.org.in) | Bank grievance → RBI Ombudsman | NACH mandate guide |
| Telegram task scam | WhatsApp/Telegram message, YouTube comment | ₹2,000 – ₹15,00,000 | MHA / I4C (cybercrime.gov.in) | 1930 → cybercrime.gov.in → FIR | WFH task scam guide |
| Trading / Ponzi scheme | Telegram group, referral from friend, YouTube finfluencer | ₹10,000 – ₹50,00,000 | SEBI (sebi.gov.in) for registered; state EOW for unregistered | SEBI SCORES → EOW FIR | Ponzi detection guide |
| Fake IT / GST / court call | Phone call, WhatsApp PDF | ₹5,000 – ₹5,00,000 | CBDT / CBIC / state police | Verify DIN on incometax.gov.in → 1930 | IT notice guide |
| Digital arrest scam | Phone call impersonating police/narcotics | ₹50,000 – ₹25,00,000 | MHA / state police | 1930 immediately → FIR in 24 hrs | Digital arrest guide |
Reading the table: The “Fastest complaint route” column is the single most important field. If you are in the first hour of a fraud, do not Google the category — go directly to 1930 and the listed portal. Then open the matching guide for the detailed letter-sequence and RTI strategy.
Most financial traps share a common set of red flags, regardless of whether the front is an edtech course, a stock-tip channel, or a fake authority caller. Learn these eight signs and you will catch the majority of frauds before money moves:
For a deeper dive into recognising these patterns, see the 7-point Ponzi detection checklist and the real vs fake police notice guide.
The Reserve Bank of India's “Limited Liability of Customers in Unauthorised Electronic Banking Transactions” circular (DBR.No.Leg.BC.78/09.07.005/2017-18, available at rbi.org.in) is the most powerful consumer protection tool that most middle-class Indians have never heard of. It creates a three-tier liability framework based on how quickly you report the fraud:
This means the golden hour matters. If you notice an unauthorised debit, your first call is 1930, your second action is an email to your bank's grievance redressal officer citing this RBI circular, and your third step is filing on cybercrime.gov.in. Do not wait “to see if it resolves itself” — the liability clock starts ticking from the transaction timestamp.
For the full walk-through of the limited liability framework and how to cite it in a bank complaint, see the golden-hour zero liability guide and what to do when a bank refuses a zero-liability refund. If your bank has frozen your account in connection with a cyber-fraud investigation (even as a victim), see the account-freeze RTI guide and the account-freeze recovery walkthrough.
The RBI also operates the Integrated Ombudsman Scheme 2021, which covers deficiency in service across banks, NBFCs, and digital payment system providers. You can file directly at the RBI Ombudsman portal without a lawyer. See the banking ombudsman guide for the step-by-step complaint filing process. If your complaint involves a digital lending app, see the digital lending borrower rights guide — the RBI's 2022 guidelines on digital lending require all loan disbursals to go directly to the borrower, not through a pass-through vehicle.
India's legal framework for financial fraud is fragmented across multiple statutes. Knowing which law covers your situation determines where you file, how fast you get relief, and what evidence you need. The key statutes are:
SEBI SCORES (SEBI Complaints Redress System) is the online grievance mechanism for complaints against SEBI-registered intermediaries — stock brokers, depository participants, investment advisers, research analysts, mutual funds, and merchant bankers. The portal is at scores.sebi.gov.in and the underlying rules are published at sebi.gov.in.
The process works in three stages:
As of 2024, SEBI has also launched Smart ODR (Online Dispute Resolution), a platform that connects investors with independent mediators for disputes that cannot be resolved through SCORES. This is faster and cheaper than approaching the Securities Appellate Tribunal (SAT). See the SEBI SCORES and Smart ODR complaint guide for the full filing walkthrough.
Important: SCORES only accepts complaints against registered intermediaries. If your complaint is against an unregistered entity — a Telegram tip provider, a fake trading app, or an unauthorised deposit scheme — file instead with the state Economic Offences Wing (EOW) under the BUDS Act and BNS §318/§319. The RTI route can also be used to check whether SEBI has received prior complaints against the entity. See the banking-insurance RTI guide.
The Insurance Ombudsman is an independent grievance redressal mechanism created under the IRDAI (Insurance Ombudsman) Rules, 2017. It covers all insurance-related disputes — life, health, motor, travel, and property — and has jurisdiction over claims up to ₹50 lakh (increased from ₹30 lakh in the 2024 amendment, per a pib.gov.in release). There is no fee for filing, and you do not need a lawyer.
The Ombudsman handles three types of complaints:
The mandatory pre-condition is that you must first file a written complaint with the insurer's grievance redressal officer and wait 30 days. If the insurer does not resolve or does not respond, you can approach the Ombudsman within one year of the insurer's response (or the 30-day silence period). See the insurance claim rejection recovery guide and the Bima Bharosa health insurance complaint guide for the complete filing sequence.
For life insurance specifically, the free-look cancellation window is 15 days (30 days for policies sold through distance mode, including online). Within this window you can return the policy for a full refund minus stamp duty, medical test costs, and proportionate risk premium. This is codified in IRDAI (Protection of Policyholders' Interests) Regulations, 2017, Regulation 6. See the IRDAI complaint guide.
RTI is not just for government transparency activists. For a middle-class fraud victim, a ₹10 RTI application is the cheapest discovery tool available. It can pull:
The process: draft a focused application under §6(1) of the RTI Act, 2005, addressed to the Central Public Information Officer (CPIO) of the relevant regulator. Pay the ₹10 fee (free for BPL applicants). The CPIO must respond within 30 days (48 hours if the information concerns life or liberty). If the response is evasive or denied, file a First Appeal under §19(1) within 30 days.
For example, if an edtech company refuses your refund and claims it is “government-affiliated”, an RTI to the Ministry of Education PIO asking “Provide the list of recognised institutions that have entered into any agreement with [Company Name], and the status of any complaints received against them” can expose the lie. See the banking-insurance RTI guide for template applications targeting RBI and IRDAI, and use the AI RTI Drafter to pre-fill your application. If the PIO gives a brush-off reply, the PIO Reply Checker will generate a section-wise rebuttal, and the First Appeal Builder will draft the §19(1) appeal.
RTI is also critical in criminal cases. If your FIR is not being investigated, an RTI to the police station asking “Provide the action-taken report on FIR No. _/2026 registered at _ Police Station under BNS sections ___” can force movement. See the FIR-not-registered RTI guide and the FIR copy RTI guide.
The actions you take in the first 24 hours after a fraud determine whether you recover any money. The RBI's limited liability framework, the cyber-freeze mechanism under 1930, and the golden-hour evidence-preservation window all close fast. Here is the hour-by-hour playbook:
Within the first hour (the golden hour):
Within 4–6 hours:
Within 24 hours:
After 24 hours (if you missed the golden hour):
Save these contacts in your phone today, before you need them:
For a full guide to using the consumer helpline and filing a complaint with the consumer commission, see how to file in consumer court and the NCDRC filing guide. The Ministry of Consumer Affairs publishes regular consumer protection advisories at pib.gov.in and consumeraffairs.gov.in.
Editorial standards and expertise
This guide is produced by the RTI Wiki editorial team, a collective of citizen-rights researchers, legal analysts, and RTI practitioners who have contributed to 500+ guides on Indian consumer rights, banking grievance, cyber-fraud recovery, and regulatory complaint routes since 2021.
Experience: Every complaint route, regulator portal, and statutory citation on this page has been tested through real reader cases. We do not publish theoretical guides — each article is built from actual complaints filed, RTI applications drafted, and outcomes tracked.
Authoritativeness: This hub is referenced by consumer-rights forums, cyber-cell awareness campaigns, and legal-aid organisations. Our guides are cross-checked against the text of the cited statutes and verified against the official portals of RBI (rbi.org.in), SEBI (sebi.gov.in), IRDAI (irdai.gov.in), and Ministry of Consumer Affairs (consumeraffairs.gov.in).
Trustworthiness: This is an educational resource, not legal advice. We do not offer paid services, do not take a cut of recovered amounts, and do not share reader information with any third party. The RTI Wiki is a free, ad-supported, open-knowledge project. If you need situation-specific legal advice, consult a qualified advocate enrolled with the Bar Council of India.
Review cycle: This page is reviewed every quarter and updated as circulars, portal URLs, and statutory timelines change. The last review date is shown in the notice box at the top of this page. If you spot an error or a broken link, report it via the contact page.
Primary sources: RBI Limited Liability Circular (2017), BUDS Act 2019, Consumer Protection Act 2019, SEBI Investment Adviser Regulations 2013, IRDAI Protection of Policyholders' Interests Regulations 2017, BNSS 2024, IT Act 2000 (amended). Verified against rbi.org.in, sebi.gov.in, pib.gov.in, irdai.gov.in, and consumeraffairs.gov.in.
Dial 1930 (the national cyber-helpline) and file a parallel report on cybercrime.gov.in. Do this within 24 hours, ideally within the first golden hour. The 1930 ticket triggers an account-level freeze with the receiving bank under the Reserve Bank of India circular on suspicious credits. After 24 hours, banks rarely freeze. Then file an FIR at your local cyber-police station with the 1930 ticket number printed out. See the 1930 helpline script for exactly what to say.
Usually not. The Consumer Protection Act 2019, §2(46), treats one-sided “no-refund” clauses as unfair contract terms. The NCDRC and the Ministry of Education's 2023 coaching guidelines both back partial refund on dropout. The exception is genuinely consumed services (classes already attended). Read the edtech refund guide for the exact letter sequence.
Step one: the insurer's grievance cell (mandatory before escalation). Step two: IRDAI's Bima Bharosa portal at bimabharosa.irdai.gov.in. Step three: the Insurance Ombudsman for claims up to ₹50 lakh. The 14-day free-look window from policy receipt is your strongest tool, within those 14 days, the insurer must refund the premium minus stamp duty and medical-test cost. See the full IRDAI complaint guide.
Stop tasks immediately. Do not “top up” the wallet to “unlock” your balance, that money is gone the moment you send it. Screenshot every chat, the wallet page, and the UPI debits. Dial 1930. File on cybercrime.gov.in. Block the Telegram contact, leave the group, do not delete the chat. Then read the WFH task scam recovery walkthrough.
Go to sebi.gov.in and search the Investment Adviser (IA) or Research Analyst (RA) register. A registration number looks like INA000012345 or INH000012345. If the channel admin cannot give you the number, they are unregistered and acting illegally. SEBI's 2024 finfluencer rules bar unregistered tips. File on SEBI SCORES at scores.sebi.gov.in. See the Telegram tips scam guide.
Fake. CBDT never asks for an OTP, never asks for payment over a phone call, never asks for screen-share. Every genuine income-tax communication carries a Document Identification Number (DIN) that you can verify at incometax.gov.in/verifyDIN. Hang up. If you are anxious, log in to the e-filing portal yourself and check the “Pending Actions” tab. The full 60-second test is in the 2026 income-tax notice guide.
There is a chance, but it is small and slow. Recovery happens through the receiver appointed by the court (under the Banning of Unregulated Deposit Schemes Act 2019), the state Economic Offences Wing, and the consumer commission. The earlier you join the FIR list, the better your position when assets are auctioned. Read the Ponzi detection guide and the chit fund recovery guide for the receiver route.
Because RTI is the cheapest discovery tool in India. A ₹10 application can pull the file noting from the regulator, the inspection report from the SHO, the show-cause copy from the licensing authority. That same information costs ₹50,000 in a writ petition. RTI does not replace your consumer or criminal case; it powers it with paper. Start with the AI RTI Drafter and the RTI tools master guide.
Three steps that actually work. One, switch their phone to a Jio or Airtel plan with the spam-call filter on by default. Two, set a ₹10,000 daily UPI cap on their bank app and remove the “send to new payee” permission. Three, walk them through the real vs fake police notice checklist and the fake court summons explainer one weekend. Repetition matters more than a one-time warning.
Possibly, but only if you acted within the golden hour. Digital arrest scams — where a caller impersonates a police officer, CBI official, or narcotics officer and threatens arrest unless you transfer money — are now the highest-value individual fraud in India, with single losses exceeding ₹1 crore reported. The recovery path is the same as any cyber-fraud: 1930, cybercrime.gov.in, FIR within 24 hours, and RBI limited liability claim. The difference is that these scams often involve multiple transactions over hours, so every separate debit needs its own 1930 ticket. See the digital arrest scam guide and the 7-minute rescue protocol.
A chargeback is a card-network mechanism (Visa, Mastercard, RuPay) where you ask your card-issuing bank to reverse a transaction because the merchant did not deliver the goods or services, or the transaction was fraudulent. It applies to credit and debit card transactions and has a 90–120 day window depending on the network. See the chargeback guide.
A zero-liability claim is an RBI-mandated protection under the Limited Liability Circular (2017). It applies to all electronic banking transactions — UPI, IMPS, NEFT, RTGS, and cards — and is triggered when the transaction is unauthorised (you did not initiate it and did not contribute through negligence). If reported within 3 working days, your liability is zero regardless of the channel. See the zero-liability guide.
You can pursue both simultaneously: file a chargeback with the card network AND a zero-liability claim with the bank. They are independent remedies.
This is increasingly common — banks freeze accounts that receive funds flagged as fraudulent, even if you are the victim, not the fraudster. The freeze is usually under the Liabilities, Risks, and Obligations under BNSS §105 (proceeds of crime). File a representation to the bank explaining the source of the funds, carry your KYC and transaction proof to the branch, and if the bank does not lift the freeze within a reasonable period, file an RTI to trace the underlying cyber-cell notice that triggered the freeze. See the account-freeze RTI guide and the account-freeze recovery walkthrough.
Illegal loan apps — the ones that harass borrowers, access contacts, and extort money — are not regulated by the RBI and are not “banks” for the purpose of the zero-liability framework. However, if an illegal loan app deducted money from your account through a NACH/eNACH mandate without proper consent, you can still invoke the RBI's mandate-cancellation rules and file a complaint with the Banking Ombudsman for the bank's failure to verify the mandate. See the loan-app harassment guide and the digital lending borrower rights guide. The RBI's September 2022 guidelines on digital lending (available at rbi.org.in) require all regulated entities to ensure that loan disbursals go directly to the borrower, not through pass-through entities.
Under the Consumer Protection Act, 2019, the limitation period for filing a complaint is two years from the date of the cause of action (the date of the fraud or the date you discovered it). However, do not wait — evidence degrades, companies shut down, and witnesses forget. File as early as possible. If you are approaching the two-year limit, file a complaint even if your evidence is incomplete — you can supplement it later. See how to file in consumer court and the NCDRC filing guide. A PIB release at pib.gov.in has detailed the enhanced e-Daakhil platform for online consumer complaint filing.